Network Security

I have a problem setting up a pix for one of our customers.The network i'm dealing with consist of a 1602 router on the outside, the pix, an inside network and a DMZ.The DMZ is my problem. The following is connected to the ports of the pix:Outside po...

Is there anything special I have to do to allow a windows 2000 server using w32 time service (SNTP) to access a time server through the outside interface of a PIX? I would like to accomplish this using only PAT on the outside interface's IP address,...

I have a PIX to PIX tunnel running from Head Office (515) to a branch office (520). I have second tunnel running from another branch office's router (1710) to the Head Office PIX. Most of the time, performance of these two tunnels is good/reliable. H...

When PIX is using nat for H.323, PIX changes source IP address of packet header in order to send it to the host in the internet. But H.323 protocol has source ip address in the data portion of incoming packet to PIX. And the destination host in the i...

Hi,I have seen pix 520 in the past but interested to know how the 501 is as a small office FW.Any others of recommendation. I know this is Cisco but does anyone sell other typoe as good.cheersPat

Can anyone give me an opinion on the PIX vs. the Symantec Enterprise Firewall? I prefer the PIX but I need to convince some others why it's better...

Hello All,I have a dmz interface running on network 192.168.2.0 and inside network running on 192.168.1.0. I want all of my devices on dmz to connect to devices on inside network. What conduit commands I could use in conjuction with the command bel...

Is it possible to create lan to lan tunnels from a pix to a CVPN? Fromt a 3640 router to a CVPN 3030? Can you point me to the configuration guide for this? Thanks.

How do I generate an RSA key-pair for the PIX Firewall 520 V6.1(1).This seems to be required in order to use ssh to the PIX instead of telnet.I tried ca gen rsa key 1024 , which I found in this forum, but it did not work at all -> ca is not known.Wha...

I have a shiny new Pix 501/10 user/3des. I have a remote site with a dsl connection that has a dynamic ip address from the ISP. I want to do a site to site ipsec 3des ike preshared keys tunnel to connect to my Concentrator 3015. I have the Cisco s...

i am running pix 5.3(1) and i recently changed all conduit permit statements to access-lists. the problem i am now having is that when i try to access my ftp server on my internal network from outside i can not get through the pix. this setup was w...

Hello all.I'm trying to configure a Pix 520 with 4 interfaces, 2 of them connected to different Vlans, and the other 2 connected to different ADLS routers atached to the internet.We pretend to 'save' firewalls by means of using less firewalls with mo...

Has anyone ever had success setting up authentication with the MS Win2K IAS service for PIX remote access VPN? If so, could you point me to any docs? Thanks. Alex

I upgraded pix 525 IOS ver 5.2(3) to IOS 6.0(1).The DES feature was disabled on the PIX.The show version commands shows the activation key to be activated to enable the DES.During upgrade of the IOS I was not prompted to enter the key.Now i have IO...

Is there a way you can configure the pix to ping the outside interface? Not that you wouldwant to do it..Thanks